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BE CBVED 
cE ^lFA)C CENTER 

AMENDMENTS TO THE CLAIMS MAY 2 1 2008 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 

1 32 (Cancelled) 

33 . (Currently Amended) An apparatus to reside in a data center coupled between a public 
network and a server of the data cent er, the apparatus c omprising 

[lan]] a first interface to the public network to at loaot one wired client device to receive Secure 
Sockets Layer (SSL) encrypted data from at least one wired client device and at- least on e wireless 
client device to receive Wireless Transport Layer Security (WTLS) encrypted data from at least one 
wireless client device ; 

l client-type determining logic to determine whether a client device requesting a secure connection is 

J 5 . • • 

; , a wired client device or a wireless client device; } . r *k ** 

logic to perform a wired authentication to establish the secure connection when it is determined that 
the requesting client device is [[a]] the wired client device; 

logic to perform a wireless authentication to establish the secure connection when it is determined 
that the requesting client device is [[a]] £he wireless client device; [[and]] 

logic to convert the SSL encrypted data to an unencrypted format and to convert the WTLS 
encrypted data to an unencrypted format , whoroin tho conversions aro bas e d on a conversion 
indication received through the interfacei and 

a_$econd interface to provide the data in the unencrypted formats to the server of the data center . 

34. (Currently Amended) The apparatus of claim 33, impl e mented within a data center, aed 
further eomprioing an interface to transmit data in the unencrypted format to, and wherein the 
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second interface is to receive data in an unencrypted format from ([, a]] the server within the data 

35. (Currently Amended) The apparatus of claim 33, wherein the logic to perform the wired 
authentication comprises logic to perform the authentication using a wired communication 
protocol, and wherein the logic to perform the wireless authentication comprises logic to perform 
the authentication using a wireless communication protocol, 

36. (Currently Amended) The apparatus of claim 35, wherein the logic to perform the wired 
authentication comprises logic to perform the authentication using a Public Key Infrastructure 
(PKI) protocol and wherein the logic to perform the wireless authentication comprises logic to 
perform t^e authentication using a Wireless Public Key Infrastructure (WPKI) protocol. 

37. (Currently Amended) The apparatus of claim 33, wherein the logic to perform the wired 
authentication and the logic to perform the wireless authentication each comprises: 

logic to determine if the [[a]] requesting client device has requested authentication of the server; 
and 

logic to transmit a server digital certificate for the server when it is determined that the requesting 
client device has requested the authentication of the server. 

38. (Currently Amended) The apparatus of claim 33, wherein the logic to perform the wired 
authentication and the logic to perform the wireless authentication each comprises: 

logic to generate a request for a digital certificate from T[aJJ the requesting client device; and 

logic to authenticate a digital certificate received from [[a]] the reouesting client device. 

39. (Cun-ently Amended) The apparatus of claim 33, wherein the logic to perform the wired 
authentication and the logic to perform the wireless authentication each comprises: 
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logic to retrieve a client digital certificate using a Uniform Resource Locator received from the 
requesting client device; and 

logic to authenticate a retrieved client digital certificate. 

40. (Currently Amended) The apparatus of claim 33, wherein the client- type determining logic 
comprises: 

logic to determine a security protocol used for an encrypted request from [[a]] the requesting client 
device; and 

logic to determine whether the requesting client device is [[a]] the wired client device or [[a]] the 
wireless client device dependent on the determined security protocol. 

41 . (Currently Amended) The apparatus of claim 33, further comprising: 

r 

' ■ i • ;. • v • 

logic to receive a client digital signature from the client device ; and 
logic to validate the received client digital signature. 

42. (Currently Amended) A method comprising: 

receiving data within a data center through a public network from at least one wired client device 
and at least one wireless client device each requesting a secure connection with a server of the data 
center; 

performing a wired authentication to establish the secure connection with the wired client device; 
and 

performing a wireless authentication to establish the secure connection with the wireless client 
device; [[and]] 
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converting the data from an encrypted format to an unencrypted format based on a received 
conv e rsion indication ; and 

providing the data in the unencrypted format to the server of the data center through an interface . 

43. (Currently Amended) The method of claim 42, wherein said performing the wired 
authentication comprises performing the authentication using a wired communication protocol and 
wherein [[the]] said performing the wireless authentication comprises performing the authentication 
using a wireless communication protocol. 

44. (Currently Amended) The method of claim 42, wherein said performing the wired 
authentication and said performing the wireless authentication each comprises: 

determining if [[a]] the requesting client device has requested authentication of the server; and 

transmitting a server digital certificate for the server when it is determined that the requesting client 
device has requested the authentication of the server. 

45. (Currently Amended) The method of claim 42, wherein each of said performing the wired 
authentication and said performing the wireless authentication comprises: 

generating a request for a digital certificate from f[a]] the requesting client device; and 

authenticating a digital certificate received from [[a]] the requesting client device. 

46. (Currently Amended) The method of claim 45, wherein said authenticating [[a]] the digital 
certificate includes verifying a validity period of the client digital certificate, 

47. (Currently Amended) The method of claim 42, wherein each of said performing the wired 
authentication and said performing the wireless authentication comprises: 



App. No. 10/045.893 - 5 - Dkt No. 42P123 18X 

BEV/wIr 

PAGE 7/17 " RCVD AT 5/2112008 7:11:53 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-5/2 * DNIS:2738300 * CSID:3037406962 4 DURATION (mm-ss):04-58 



MAY-21-2008 17:11 From: BSTZ 



3037406962 



To:USPTO 



P.8'17 



retrieving a client digital certificate using a Uniform Resource Locator received from the requestin g 
client device; and 

authenticating [[a]] the retrieved client digital certificate, 

48. (Currently Amended) The method of claim 42, further comprising: 

determining a security protocol used for an encrypted request from a oliont device ; and 

determining whether the requesting client device is a wired client device or a wireless client device 
dependent on the determined security protocol. 

49. (Currently Amended) The method of claim 42, further comprising: 
receiving a client digital signature from a client device ; and 
validating the received client digital signature, 

50. (Currently Amended) An article comprising a machine-readable medium having stored 
thereon instructions that if executed cause a machine to perform operations comprising: 

receiving first encrypted data through a public network from at least one wired client device and 
second encrypted data through the public network from at least one wireless client device each 
requesting a secure connection with a server within a data center , 

performing a wired authentication to establish the secure connection with the wired client device; 
and 

performing a wireless authentication to establish the secure connection with the wireless client 
device; and 

converting the first encrypted data to a plain data format and converting the second encrypted data 

to a plain data format based oimi conversion indication r e c e ived at tho machine ; and 
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providing the converted data in the plain data formats to the server through an interface, 
wherein the machine-readable medium comprises one of a disk and a memory . 

5 1 . (Previously Presented) The article of claim 50, wherein the instructions to perform the 
wired authentication further comprise instructions that if executed cause the machine to perform 
operations comprising authentication using Public Key Infrastructure (PKI) protocol, and wherein 
the instructions to perform the wireless authentication further comprise instructions that if executed 
cause the machine to perform operations comprising authenticating using Wireless Public Key 
Infrastructure (WPKI) protocol. 

52. (Currently Amended) The article of claim 50, wherein the instructions to perform each of 
the wired authentication and the wireless authentication comprise instructions that if executed cause 

. the machine to perform operations comprising: :: ; 

generating a request for a digital certificate from [[a]] the requesting client device; and 
authenticating a digital certificate received from TO)] the requesting client device. 

53. (Previously Presented) The method of claim 42, further comprising updating a short-lived 
server certificate from a certificate authority repository based on a user defined interval. 

54. (Previously Presented) The method of claim 42, wherein said performing the wired 
authentication comprises performing the wired authentication based on Public Key Infrastructure 
(PKI), and wherein said performing the wireless authentication comprises performing the wireless 
authentication based on Wireless Public Key Infrastructure (WPKI). 

55. (Previously Presented) The method of claim 42, further comprising: 

performing a security format conversion for encrypted data received from the wired device; and 

performing a security format conversion for encrypted data received from the wireless device. 
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56. (Currently Amended) An apparatus comprising: 

a network interface to receive Secure Sockets Layer (SSL) data from a wired device through a 
public network and Wireless Transport Layer Security (WTLS) data from a wireless device through 
a public network; 

Public Key Infrastructure (PKI) logic to establish a secure connection with the wired device; 

Wireless Public Key Infrastructure (WPKI) logic to establish a secure connection with the wireless 
device; 

SSL logic to convert the SSL data to another format; 

WTLS logic to convert the WTLS data to another format , whoroin the conversions arc based on a 
received conv e rsion indication ; and 

a second interface to provide the data converted from the SSL and WTLS formats to a data center 
server over a private network. 

57. (Currently Amended) The apparatus of claim 56, wherein the apparatus is to reside in 
[[thej]_adata center between the public network and the data center server. 

58. (Previously Presented) The apparatus of claim 56, wherein the other format is a plain data 
format, and wherein the PKI logic, the WPKI logic, the SSL logic, and the WTLS logic are all 
included within a single device. 

59. (New) A single network device to be coupled within a data center between a public network 
and a server of the data center, the single network device comprising: 

a first interface to the public network, the first interface to receive first data that has been encrypted 
according to a wired encryption protocol from a wired device, and the first interface to receive 
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second data that has been encrypted according to a wireless encryption protocol from a wireless 
device; 

logic to perform a wired authentication with the wired device; 

logic to perform a wireless authentication with the wireless device; and 

logic to convert the first data to first unencrypted data and to convert the second data to second 
unencrypted data; and 

a second interface to provide the first and second unencrypted data to the server of the data center. 
60. (New) The apparatus of claim 33 T 

wherein the logic to perform the wired authentication comprises logic to verify a certificate from 
the wired client device, logic to check a certificate revocation list, and logic to provide a server side 
certificate; 

wherein the logic to perform the wireless authentication comprises logic to verify a certificate from 
the wireless client device and logic to provide a server side certificate. 
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